Privacy Policy

1. Scope of application

With this document, the responsible party would like to fulfil its information obligations to data subjects in accordance with Art. 13 and 14 of the General Data Protection Regulation (DSGVO). This data protection information is published at https://www.formwelt.net/datenschutz and has been valid since September 2020. Due to the further development of our Internet presence or due to changed legal or official requirements, it may become necessary to amend this data protection information. The amended version will be notified to you at this point.

2. Who is responsible for data processing?

The person responsible for data processing according to Art. 4 No. 7 DSGVO is:FORMWELT, gUG (haftungsbeschränkt), Im Anger 18, 29439 Lüchow. You can read the complete imprint here:

https://www.formwelt.io/contact

3. Is there a data protection officer?

We have not appointed a data protection officer for our company.

4. What do we process your data for?

Logfiles / Hosting

If you visit our website without registering or otherwise providing us with information, we only collect the following data that your browser transmits to our server (so-called “server log files”):

The individual pages of our website (URL)
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable, in anonymised form)
Our internet presence is stored and available for retrieval by a hosting provider. The web server used stores the aforementioned server log files.

Purpose of processing: hosting of the internet presence

Legal basis and legitimate interests:
The processing is carried out on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f DSGVO) in the security and stability of our internet presence by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.

4.1.1 Cookies

This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies and how that information is used, and how to manage the cookie settings.

Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

4.1.2 How do we use cookies?

As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

4.1.3 Types of cookies we use

4.1.4 Manage cookie preferences

Cookie Settings

You can change your cookie preferences any time by clicking the above button. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.

Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US

Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc

If you are using any other web browser, please visit your browser’s official support documents.

4.2 Contacting Us

When you contact us (e.g. by contact form, e-mail, telephone, fax), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information, we cannot process your request. All other information is voluntary.

Purpose of processing: Answering your request.

Legal basis: Art. 6 para. 1 lit. b DSGVO for pre- or contractual matters. Art. 6 para. 1 lit. a DSGVO for your voluntary information. Art. 6 para. 1 lit. f DSGVO for all other requests and the use of our technical service providers.

Legitimate interests:
The processing using the service providers is based on our overriding legitimate interest in responding to your request in a secure, timely and professional manner.

Storage period:
Your data will be deleted after the final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your enquiry will be stored until the end of the contract and then its processing will be restricted. If there is no longer a legal reason to store the data, it will be deleted.

Recipients of the data:
Emails: Hover, a service of Tucows https://www.hover.com. Hosting provider (see above) for contact form requests

Privacy policy of Hover: https://www.hover.com/privacy

Third country transfers:
To the extent that non-anonymised data is transferred to Hover, data processing also takes place in Canada.

Appropriate safeguards: Regarding Canada, the European Commission decided that Canada provides adequate protection for personal data of citizens from EU member states (Art. 45 GDPR).

Security notice:
Please do not send us sensitive personal data (such as bank data, health data, etc.) via unencrypted e-mail or the contact form to ensure the confidentiality of the information. Data sent unencrypted via the Internet may be read and/or intercepted by unauthorised third parties. Please use the postal service for this sensitive data.

4.3 Non-profit activity

We process the data of our supporters, interested parties, customers or other persons in accordance with Art. 6 Para. 1 lit. b. DSGVO, insofar as we offer contractual services to you or act within the framework of existing business relationships, e.g. towards members, or are ourselves recipients of services and benefits. In other respects, we process the data of data subjects pursuant to Art. 6 para. 1 lit. f. DSGVO on the basis of our overriding legitimate interests in the success of our organisation, e.g. when administrative tasks or public relations work are involved.

4.4 Donations

If you support us through donations, we process your personal data as follows.

Purposes of processing:
Acceptance and accounting of donations.

Legal basis:
For the required donor data: Art. 6 para. 1 p. 1 lit. b DSGVO. For other voluntary data: Art. 6 para. 1 lit. a DSGVO.

Storage period:
This depends on the legal regulations for the handling of donations.

Data recipient:
Banks, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449
Luxembourg, https://www.paypal.com/de

4.5 Online Videos

YOUTUBE VIDEOS

Our website uses the embedding function of YouTube, which belongs to Google Ireland Ltd (Google). A connection to YouTube servers is only established when you start the embedded YouTube video on a website. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first. For more information on the purpose and scope of data collection and processing by YouTube, please refer to Google’s privacy policy.

Purposes of processing:
Provision of a comprehensive and professional online offer, including videos. User-friendly playback option without changing the website. Speed of video playback.

Legal basis:
For the use of YouTube, you may give us your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, which you can revoke at any time with effect for the future by closing the browser window. The evaluation on the part of Google is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of the legitimate interests of Google in the display of personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Storage period:
With regard to the storage period by Google, we refer to their privacy policy.

Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google privacy policy: https://policies.google.com/privacy
Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de

Third-country transfer:
Insofar as non-anonymised data is transferred to Google LLC, data processing takes place in the USA.

4.6 Online Fonts

Our website uses so-called web fonts provided by the respective provider for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to the servers of the respective provider. This informs the provider that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be loaded from your computer.

Purpose of the processing:
Uniform presentation of our website in all media.

Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible restrictions under licensing law for their integration.

We use web fonts from the following providers:

GOOGLE

Data recipient:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, IrelandParent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google privacy policy: https://policies.google.com/privacy

Third-country transfer:
Insofar as non-anonymised data is transferred to Google LLC, data processing takes place in the USA.

4.7 Ticket Booking

If you book with us to attend events, your data will be processed as follows: The mandatory data can be seen on the booking form. Without this mandatory information, we cannot execute the booking.

Purpose of the processing:
Execution of your ticket booking.

Legal basis:
Contract pursuant to Art. 6 para. 1 lit. b DSGVO. Your consent pursuant to Art. 6 Para. 1 lit. a DSGVO applies to the data voluntarily provided by you. For other processing, Art. 6 para. 1 lit. f DSGVO applies.

Legitimate interests:
Debt collection and enforcement; measures for business management and further development of services and products.

Storage period:
Once the contract has been fully processed and the outstanding receivables have been paid in full, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data.

Data recipient:
For ticket processing:
rami.io GmbH
https://pretix.eu

E-mail dispatch:
Hover, a service of Tucows https://www.hover.com

Third country transfers:
To the extent that non-anonymised data is transferred to Hover, data processing also takes place in Canada.

Appropriate safeguards:
With regard to Canada, the European Commission decided that Canada provides adequate protection for personal data of citizens from EU member states (Art. 45 GDPR).

4.7.1 Further Education / Training Courses

If you book with us to attend events, your data will be processed as follows:
The mandatory information If you book workshops, further education or training with us, we use Eventbrite as an external partner.n can be seen on the booking form. Without this mandatory information, we cannot process the booking.

Purpose of processing:
Execution of your booking.

Legal basis:
Contract pursuant to Art. 6 Para. 1 lit. b DSGVO. Your consent pursuant to Art. 6 Para. 1 lit. a DSGVO applies to the data voluntarily provided by you. For other processing and the use of the order processor, Art. 6 para. 1 lit. f DSGVO applies.

Legitimate interests: Professional processing of the booked services

Data recipient:
Eventbrite, Inc. https://www.eventbrite.de

Privacy policy of Eventbrite:
https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinie-von-eventbrite?lg=de

Third country transfer:
Where personal data is processed, the data processing takes place in the USA.

Appropriate safeguards:
We have concluded the EU standard contractual clauses with Eventbrite, which are to be regarded as appropriate safeguards pursuant to Art. 46 (2) lit c) DSGVO.

4.7.2 Payment Processing

Purpose of processing:
execution of the order. Processing of the payment.

Legal basis:
Contract pursuant to Art. 6 Para. 1 lit. b DSGVO.

Obligation to provide:
Depending on the selected payment method, you must provide us or the payment service provider with the required payment data.

Data recipient:
The payment service providers used are listed below:

PAYPAL

Service provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/de

Credit check:
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

STRIBE

If you choose a payment method from the payment service provider Stripe, payment processing is carried out via the payment service provider Stripe Payments Europe Ltd, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO.

Service provider:
Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, https://stripe.com/de

Third country transfer:

see Stripe privacy policy: https://stripe.com/de/privacy#translation

Purpose of processing:
Execution of your booking.

Legitimate interests: Professional processing of the booked services

Data recipient:
Eventbrite, Inc. https://www.eventbrite.de

Privacy policy of Eventbrite:
https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinie-von-eventbrite?lg=de

Third country transfer:
Where personal data is processed, the data processing takes place in the USA.

Appropriate safeguards:
We have concluded the EU standard contractual clauses with Eventbrite, which are to be regarded as appropriate safeguards pursuant to Art. 46 (2) lit c) DSGVO.

4.8 Direct Marketing

Purpose of processing:
direct marketing, sales promotion.

Legal basis:
our overriding legitimate interest pursuant to Art. 6(1)(f) DSGVO.

Legitimate interests:
Direct advertising, sales promotion

Data recipient:
Agency, lettershop

4.9 Legal Obligation

Purpose of processing:
Fulfilment of legal obligations (e.g. information, notification, disclosure and storage obligations, payment of taxes and duties)

Legal basis:
The respective legal regulation applies in conjunction with Art. 6 Para. 1 lit. c DSGVO.

Data recipients:
Authorities, state institutions, lawyer, tax advisor, data protection officer, if applicable.

5. What data protection rights do I have?

As a data subject, you have the following rights:

Confirmation of data processing:
You have the right to request confirmation from us as to whether your personal data are being processed. The requirements for this can be found in Art. 15 DSGVO;

Information:
You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 DSGVO;

Correction:
You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;

Deletion:
You have the right to request the immediate deletion of personal data concerning you. The conditions for this can be found in Art. 17 of the GDPR;

Restriction of processing:
You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 DSGVO;

Data portability:
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to have us transfer this data to another controller. The requirements for this can be found in Art. 20 DSGVO;

Revocation of consent:
You have the right to revoke the consent you have given at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a DSGVO. The data processing remains lawful until the revocation. The revocation only applies for the future. The requirements for this can be found in Art. 7 (3) DSGVO;

Complaint:
You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 DSGVO. You can contact the supervisory authority responsible for the controller or the one in your country or federal state.

You can find a list of all supervisory authorities here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

2. right of objection

You have the right to object at any time with future effect to the processing of personal data relating to you which we process on the basis of our overriding legitimate interest (Art. 6 (1) lit. e or f DSGVO) for reasons arising from your particular situation; this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

3. right to object to processing of data for purposes of direct marketing and product evaluations

We collect and process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

In individual cases, we process and use your personal data to send you a product evaluation and/or other evaluation requests by e-mail, which are exclusively related to your purchase, conclusion and/or other analogous transactions. We may also use your email address and/or postal address in this context to send you product recommendations by email and/or post about similar goods and/or services we offer. You will receive these evaluation requests and product recommendations from us regardless of whether you have subscribed to a newsletter.

Exercise of the objection:
You can object to these evaluation requests and product recommendations at any time by sending a letter to FORMWELT gUG (haftungsbeschränkt), Im Anger 18, 29439 Lüchow, or by sending an e-mail to contact@formwelt.net and/or at the end of each evaluation and/or product recommendation e-mail with effect for the future, without incurring any costs other than the respective transmission costs according to the basic rates.

Your right to object automatically also applies to possible profiling, insofar as it is connected with such direct advertising. If you object to processing for the purpose of product evaluation and/or other evaluation requests and/or product recommendations, we will no longer process your personal data for these purposes with effect for the future.

If you object to processing for the purpose of direct advertising, we will no longer process your personal data for these purposes with effect for the future.

6. Where does the data come from?

We process personal data that we have received from you or the recipients of personal data.

7. Is there an obligation to provide data?

As part of the initiation and conclusion of a ticket purchase, you must provide those personal data that are necessary for the initiation, implementation and fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to enter into or perform the contract with you.

8. How long is the data stored?

Unless otherwise stipulated above, the following criteria apply to determine the storage period:

In the case of consent pursuant to Art. 6 (1) lit. a DSGVO, the data will be stored until the data subject revokes his/her consent.

In the case of pre-contractual and contractual purposes pursuant to Art. 6 para. 1 lit. b DSGVO, the data will be stored until the termination of the contract.

In the case of our overriding legitimate interest pursuant to Art. 6(1)(f) DSGVO, the data will be stored until the data subject exercises his/her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

In the case of direct advertising pursuant to Art. 6(1)(f) DSGVO, the data will be stored until the data subject exercises his/her right to object pursuant to Art. 21(2), (3) DSGVO.

Otherwise, personal data will only be stored for as long as there is a legal reason to store it.

9. Existence of automated decision-making including profiling

As a matter of principle, we do not use automated decision-making pursuant to Art. 22 DSGVO for the establishment and implementation of the business relationship. Should we use such procedures in individual cases, we will inform you of this separately, insofar as this is required by law.

Academy